Skip to content

Bump the cargo group across 1 directory with 9 updates - #367

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-4a2631301e
Open

Bump the cargo group across 1 directory with 9 updates#367
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-4a2631301e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo group with 9 updates in the / directory:

Package From To
uuid 1.24.0 1.26.0
wasmtime 47.0.3 48.0.1
wasmtime-wasi 47.0.3 48.0.1
whoami 2.1.2 2.1.3
quick-xml 0.41.0 0.42.0
flate2 1.1.9 1.1.10
dioxus 0.7.9 0.7.10
dioxus-ssr 0.7.9 0.7.10
dark-light 2.0.0 3.0.0

Updates uuid from 1.24.0 to 1.26.0

Release notes

Sourced from uuid's releases.

v1.26.0

What's Changed

Full Changelog: uuid-rs/uuid@1.25.0...v1.26.0

1.25.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

v1.24.1

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.0...v1.24.1

Commits
  • cdc96a8 Merge pull request #905 from uuid-rs/cargo/v1.26.0
  • 34e4f49 don't test macros under miri
  • d9e7242 update nightly used for miri
  • ec16819 prepare for 1.26.0 release
  • 162cd20 Merge pull request #904 from ChrisJr404/v7-additional-precision-bits
  • 97eceff Add ContextV7::with_additional_precision_bits for microsecond clocks
  • 302e0bf Merge pull request #903 from uuid-rs/cargo/1.25.0
  • b7ccde8 prepare for 1.25.0 release
  • c62dffb Merge pull request #902 from ChrisJr404/serde-bytes-module
  • 8c198b2 Add a serde::bytes module that encodes as a byte string
  • Additional commits viewable in compare view

Updates wasmtime from 47.0.3 to 48.0.1

Release notes

Sourced from wasmtime's releases.

v48.0.1

48.0.1

Released 2026-08-24.

Fixed

  • Context slots in component compositions are now correctly managed. #14139

  • The Host header is now set by default for HTTP requests sent with WASIp2. #14167

v48.0.0

48.0.0

Released 2026-08-20.

Added

  • Wasmtime has an initial implementation of the component model fixed-length-lists feature. #12315

  • Wasmtime's reflection of component imports/exports now exposes external-id information. #13874

  • Cranelift's alias analysis pass now eliminates dead stores. #13806 #13947

  • Winch now supports the wasm SIMD proposal on AArch64. #13911 #13921 #13928 #13937 #13945 #13938 #13946 ...

  • Cranelift now supports an AVX512-VNNI lowering for the dot-product wasm instruction and usdot on AArch64. #14006 #14054

  • Wasmtime's bindgen! macro now has an include_component_type option to generate a COMPONENT_TYPE constant with the encoded type of the world being bound.

... (truncated)

Changelog

Sourced from wasmtime's changelog.

48.0.1

Released 2026-08-24.

Fixed

  • Context slots in component compositions are now correctly managed. #14139

  • The Host header is now set by default for HTTP requests sent with WASIp2. #14167

48.0.0

Released 2026-08-20.

Added

  • Wasmtime has an initial implementation of the component model fixed-length-lists feature. #12315

  • Wasmtime's reflection of component imports/exports now exposes external-id information. #13874

  • Cranelift's alias analysis pass now eliminates dead stores. #13806 #13947

  • Winch now supports the wasm SIMD proposal on AArch64. #13911 #13921 #13928 #13937 #13945 #13938 #13946 ...

  • Cranelift now supports an AVX512-VNNI lowering for the dot-product wasm instruction and usdot on AArch64. #14006 #14054

  • Wasmtime's bindgen! macro now has an include_component_type option to generate a COMPONENT_TYPE constant with the encoded type of the world being bound.

... (truncated)

Commits

Updates wasmtime-wasi from 47.0.3 to 48.0.1

Release notes

Sourced from wasmtime-wasi's releases.

v48.0.1

48.0.1

Released 2026-08-24.

Fixed

  • Context slots in component compositions are now correctly managed. #14139

  • The Host header is now set by default for HTTP requests sent with WASIp2. #14167

v48.0.0

48.0.0

Released 2026-08-20.

Added

  • Wasmtime has an initial implementation of the component model fixed-length-lists feature. #12315

  • Wasmtime's reflection of component imports/exports now exposes external-id information. #13874

  • Cranelift's alias analysis pass now eliminates dead stores. #13806 #13947

  • Winch now supports the wasm SIMD proposal on AArch64. #13911 #13921 #13928 #13937 #13945 #13938 #13946 ...

  • Cranelift now supports an AVX512-VNNI lowering for the dot-product wasm instruction and usdot on AArch64. #14006 #14054

  • Wasmtime's bindgen! macro now has an include_component_type option to generate a COMPONENT_TYPE constant with the encoded type of the world being bound.

... (truncated)

Changelog

Sourced from wasmtime-wasi's changelog.

48.0.1

Released 2026-08-24.

Fixed

  • Context slots in component compositions are now correctly managed. #14139

  • The Host header is now set by default for HTTP requests sent with WASIp2. #14167

48.0.0

Released 2026-08-20.

Added

  • Wasmtime has an initial implementation of the component model fixed-length-lists feature. #12315

  • Wasmtime's reflection of component imports/exports now exposes external-id information. #13874

  • Cranelift's alias analysis pass now eliminates dead stores. #13806 #13947

  • Winch now supports the wasm SIMD proposal on AArch64. #13911 #13921 #13928 #13937 #13945 #13938 #13946 ...

  • Cranelift now supports an AVX512-VNNI lowering for the dot-product wasm instruction and usdot on AArch64. #14006 #14054

  • Wasmtime's bindgen! macro now has an include_component_type option to generate a COMPONENT_TYPE constant with the encoded type of the world being bound.

... (truncated)

Commits

Updates whoami from 2.1.2 to 2.1.3

Release notes

Sourced from whoami's releases.

v2.1.3

Changelog

Added

  • Support for detecting the Mate desktop environment

Changed

  • Bumped minimum version of dependencies libc and libredox to latest (libc 0.2.189, libredox 0.1.19)

What's Changed

New Contributors

Full Changelog: ardaku/whoami@v2.1.2...v2.1.3

Commits

Updates quick-xml from 0.41.0 to 0.42.0

Release notes

Sourced from quick-xml's releases.

v0.42.0 - String Ergonomics

What's Changed

0.42.0 -- 2026-08-22

This is a large release. The primary change is an ergonomic improvement across the entire API - quick_xml now makes use of &str and String types where possible instead of &[u8] and Vec<u8>. This requires significant refactoring of downstream code, but should result in a net simplification as well as potential performance improvements, and opens up additional opportunities in future releases.

The MSRV has been raised to 1.86. We now use Rust 2024 Edition.

Breaking Changes

  • #963: Reader now validates that input is valid UTF-8 when constructing events. Non-UTF-8 input passed to Reader::from_reader() without DecodingReader will now produce Error::Encoding instead of silently passing through invalid bytes. Use DecodingReader to transcode non-UTF-8 sources.
  • #963: Name types (QName, LocalName, Prefix, Namespace, PrefixDeclaration) now wrap &str instead of &[u8]. into_inner() returns &str, and AsRef<str> is implemented (AsRef<[u8]> has been removed). ResolveResult::Unknown now contains String instead of Vec<u8>, and NamespaceError variants contain String instead of Vec<u8>.
  • #963: Removed the decoder: Decoder field from event types (BytesStart, BytesText, BytesCData, BytesRef) and Attributes. The decoder() method is no longer available on these types. Decode methods on events now always assume UTF-8 input. Error::missed_end() no longer takes a Decoder parameter.
  • #963: Event types (BytesStart, BytesEnd, BytesText, BytesCData, BytesPI, BytesRef) now store Cow<str> internally instead of Cow<[u8]>. into_inner() on BytesText, BytesCData, BytesPI, and BytesRef now returns Cow<str>. BytesStart::set_name() now takes &str instead of &[u8].
  • #963: All event types and the Event enum now implement Deref<Target = str> instead of Deref<Target = [u8]>. Explicit AsRef<str> impls are provided to avoid ambiguity.
  • #963: Removed decode() methods from BytesText, BytesCData, and BytesRef. Content is already available as &str via Deref. The xml10_content(), xml11_content(), xml_content(), and html_content() methods now return Cow<str> directly instead of Result<Cow<str>, EncodingError>.
  • #963: Attribute::value is now Cow<'a, str> instead of Cow<'a, [u8]>. The From<(&[u8], &[u8])> impl has been removed.
  • #963: BytesDecl::version(), encoding(), and standalone() now return Cow<'_, str> instead of Cow<'_, [u8]>.
  • #963: Removed Reader::decoder() method. Use Reader::encoding() instead (available with the encoding feature). Removed decoder() from the XmlRead serde trait. Removed all methods from Decoder (the struct is kept only for backward compatibility with deprecated Attribute methods).
  • #980: NamespaceError::TooManyDeclarations has been renamed to TooManyBindings, and NamespaceResolver::set_max_declarations_per_element has been renamed to NamespaceResolver::set_max_namespace_bindings, and the semantic behavior has

... (truncated)

Changelog

Sourced from quick-xml's changelog.

0.42.0 -- 2026-08-22

This is a large release. The primary change is an ergonomic improvement across the entire API - quick_xml now makes use of &str and String types where possible instead of &[u8] and Vec<u8>. This requires significant refactoring of downstream code, but should result in a net simplification as well as potential performance improvements, and opens up additional opportunities in future releases.

The MSRV has been raised to 1.86. We now use Rust 2024 Edition.

Breaking Changes

  • #963: Reader now validates that input is valid UTF-8 when constructing events. Non-UTF-8 input passed to Reader::from_reader() without DecodingReader will now produce Error::Encoding instead of silently passing through invalid bytes. Use DecodingReader to transcode non-UTF-8 sources.
  • #963: Name types (QName, LocalName, Prefix, Namespace, PrefixDeclaration) now wrap &str instead of &[u8]. into_inner() returns &str, and AsRef<str> is implemented (AsRef<[u8]> has been removed). ResolveResult::Unknown now contains String instead of Vec<u8>, and NamespaceError variants contain String instead of Vec<u8>.
  • #963: Removed the decoder: Decoder field from event types (BytesStart, BytesText, BytesCData, BytesRef) and Attributes. The decoder() method is no longer available on these types. Decode methods on events now always assume UTF-8 input. Error::missed_end() no longer takes a Decoder parameter.
  • #963: Event types (BytesStart, BytesEnd, BytesText, BytesCData, BytesPI, BytesRef) now store Cow<str> internally instead of Cow<[u8]>. into_inner() on BytesText, BytesCData, BytesPI, and BytesRef now returns Cow<str>. BytesStart::set_name() now takes &str instead of &[u8].
  • #963: All event types and the Event enum now implement Deref<Target = str> instead of Deref<Target = [u8]>. Explicit AsRef<str> impls are provided to avoid ambiguity.
  • #963: Removed decode() methods from BytesText, BytesCData, and BytesRef. Content is already available as &str via Deref. The xml10_content(), xml11_content(), xml_content(), and html_content() methods now return Cow<str> directly instead of Result<Cow<str>, EncodingError>.
  • #963: Attribute::value is now Cow<'a, str> instead of Cow<'a, [u8]>. The From<(&[u8], &[u8])> impl has been removed.
  • #963: BytesDecl::version(), encoding(), and standalone() now return Cow<'_, str> instead of Cow<'_, [u8]>.
  • #963: Removed Reader::decoder() method. Use Reader::encoding() instead (available with the encoding feature). Removed decoder() from the XmlRead serde trait. Removed all methods from Decoder (the struct is kept only for backward compatibility with deprecated Attribute methods).
  • #980: NamespaceError::TooManyDeclarations has been renamed to TooManyBindings, and NamespaceResolver::set_max_declarations_per_element has been renamed to NamespaceResolver::set_max_namespace_bindings, and the semantic behavior has changed slightly. The default maximum has also been reduced from 256 to 128.
  • #1000: DeError::UnexpectedStart renamed to DeError::MixedContent. That error is emitted when you try to deserialize boolean, number or string field from something like <field>text <tag/> another text</field>.

... (truncated)

Commits
  • 36a2c52 Release 0.42.0
  • a4b9fca cargo fmt
  • 22c99f5 Update Rust Edition to 2024
  • 83351fb Add rename = $value to a table in serde example comments
  • f4db767 Clarify documentation about lifetimes of the events and attributes
  • 9f4c66a Fix formatting for correct assertions in read_nodes_serde
  • 6950ef7 Add GHA job to execute examples
  • dbf9e3f Show XML Decl tracking in examples
  • aab9452 Add writing a Decl event to the writer example
  • 1573e05 Avoid trim_text(true) in the in-depth examples
  • Additional commits viewable in compare view

Updates flate2 from 1.1.9 to 1.1.10

Release notes

Sourced from flate2's releases.

1.1.10

What's Changed

New Contributors

Full Changelog: rust-lang/flate2-rs@1.1.9...1.1.10

Commits
  • ed93d4f Merge pull request #558 from rust-lang/lib-doc-update
  • fb5228d Merge pull request #559 from bushrat011899/no_std
  • 6ed3ba3 Add executable no_std example
  • faed8a0 Expand CI to test no_std compatibility and correctness
  • 2ba8e7e Add unstable no_std support behind flate2_unstable_nightly_alloc_io
  • 3fe1126 Centralize usage of std for error and io
  • 98e313a Add GzHeader::mtime_as_duration
  • 0642965 Switch to core implicit prelude and only use std where required
  • 454a63c Remove left-over dbg! statement
  • 2a490b7 Add runtime_detection feature
  • Additional commits viewable in compare view

Updates dioxus from 0.7.9 to 0.7.10

Release notes

Sourced from dioxus's releases.

v0.7.10

What's Changed

Full Changelog: DioxusLabs/dioxus@v0.7.9...v0.7.10

Commits
  • 57d6794 release v0.7.10
  • fda083b Fix hotpatching when the bin target's crate name differs from the package nam...
  • See full diff in compare view

Updates dioxus-ssr from 0.7.9 to 0.7.10

Release notes

Sourced from dioxus-ssr's releases.

v0.7.10

What's Changed

Full Changelog: DioxusLabs/dioxus@v0.7.9...v0.7.10

Commits
  • 57d6794 release v0.7.10
  • fda083b Fix hotpatching when the bin target's crate name differs from the package nam...
  • See full diff in compare view

Updates dark-light from 2.0.0 to 3.0.0

Release notes

Sourced from dark-light's releases.

v3.0.0

We're thrilled to announce the release of version 3.0.0! 🚀

After listening to your feedback, this update brings exciting changes to the API.

Consumers can now react to system theme changes instead of only polling detect(). Two new entry points are available:

  • dark_light::subscribe() -> Result<Watcher, Error> — a blocking watcher for any thread or event-loop poll, no async runtime required.
  • dark_light::stream() -> Result<impl Stream<Item = Mode>, Error> — an async adapter over the same watcher. Enabled by default via the async-io feature, or tokio.

This works across all supported platforms: the XDG portal's SettingChanged D-Bus signal on Linux/BSD, RegNotifyChangeKeyValue on Windows, and the native MediaQueryList change event on WASM.

On macOS, changes are currently detected via a 1-second polling thread rather than a native notification. Observing NSDistributedNotificationCenter requires a hand-rolled Objective-C delegate that isn't yet safely exposed by the objc2 bindings we use, so we're shipping this version now and may revisit it later.

We had originally removed this feature entirely over the macOS limitation, but Linux, Windows, and WASM all had working implementations, and macOS was the only blocker. Dropping the feature for everyone over one platform's rough edges didn't sit right, so we're reintroducing it here.

What's Changed

New Contributors

Full Changelog: rust-dark-light/dark-light@2.0.0...3.0.0

Commits
  • ff54a35 v3.0.0
  • fd942aa chore: bump dependencies
  • 0fd8fa2 fix: correct broken doctest on stream() re-export
  • 5ed59e2 feat: add async stream() adapter over Watcher
  • 750aeae feat: add subscribe() to react to theme changes
  • 0f18d2f Bumped winreg to 0.55.0
  • 954630a Update objc2 to 0.6.3 and objc2-foundation to 0.3.2.
  • bd47860 chore: fix typo and modify as adjust
  • 05cb5e5 feat: expose zbus's async-io and tokio features
  • f3cda09 feat: remove ashpd use zbus directly
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the cargo group across 1 directory with 9 updates
ba9e37b 
Bumps the cargo group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [uuid](https://github.com/uuid-rs/uuid) | `1.24.0` | `1.26.0` |
| [wasmtime](https://github.com/bytecodealliance/wasmtime) | `47.0.3` | `48.0.1` |
| [wasmtime-wasi](https://github.com/bytecodealliance/wasmtime) | `47.0.3` | `48.0.1` |
| [whoami](https://github.com/ardaku/whoami) | `2.1.2` | `2.1.3` |
| [quick-xml](https://github.com/tafia/quick-xml) | `0.41.0` | `0.42.0` |
| [flate2](https://github.com/rust-lang/flate2-rs) | `1.1.9` | `1.1.10` |
| [dioxus](https://github.com/DioxusLabs/dioxus) | `0.7.9` | `0.7.10` |
| [dioxus-ssr](https://github.com/DioxusLabs/dioxus) | `0.7.9` | `0.7.10` |
| [dark-light](https://github.com/rust-dark-light/rust-dark-light) | `2.0.0` | `3.0.0` |



Updates `uuid` from 1.24.0 to 1.26.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.24.0...v1.26.0)

Updates `wasmtime` from 47.0.3 to 48.0.1
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases)
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v48.0.1/RELEASES.md)
- [Commits](bytecodealliance/wasmtime@v47.0.3...v48.0.1)

Updates `wasmtime-wasi` from 47.0.3 to 48.0.1
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases)
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v48.0.1/RELEASES.md)
- [Commits](bytecodealliance/wasmtime@v47.0.3...v48.0.1)

Updates `whoami` from 2.1.2 to 2.1.3
- [Release notes](https://github.com/ardaku/whoami/releases)
- [Commits](ardaku/whoami@v2.1.2...v2.1.3)

Updates `quick-xml` from 0.41.0 to 0.42.0
- [Release notes](https://github.com/tafia/quick-xml/releases)
- [Changelog](https://github.com/tafia/quick-xml/blob/master/Changelog.md)
- [Commits](tafia/quick-xml@v0.41.0...v0.42.0)

Updates `flate2` from 1.1.9 to 1.1.10
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](rust-lang/flate2-rs@1.1.9...1.1.10)

Updates `dioxus` from 0.7.9 to 0.7.10
- [Release notes](https://github.com/DioxusLabs/dioxus/releases)
- [Commits](DioxusLabs/dioxus@v0.7.9...v0.7.10)

Updates `dioxus-ssr` from 0.7.9 to 0.7.10
- [Release notes](https://github.com/DioxusLabs/dioxus/releases)
- [Commits](DioxusLabs/dioxus@v0.7.9...v0.7.10)

Updates `dark-light` from 2.0.0 to 3.0.0
- [Release notes](https://github.com/rust-dark-light/rust-dark-light/releases)
- [Commits](rust-dark-light/dark-light@2.0.0...3.0.0)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: wasmtime
  dependency-version: 48.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: wasmtime-wasi
  dependency-version: 48.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
- dependency-name: whoami
  dependency-version: 2.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: quick-xml
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo
- dependency-name: flate2
  dependency-version: 1.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: dioxus
  dependency-version: 0.7.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: dioxus-ssr
  dependency-version: 0.7.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo
- dependency-name: dark-light
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants